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1 . In a network configuration that includes a client computer system, a server 
computer system and a plurality of proxy computer systems that the client computer 
system would need to communicate through in order to communicate with the server 
computer system, the plurality of proxy computer systems including at least a first proxy 
that requires authentication using first authentication data and a second proxy that requires 
authentication using second authentication data, a method of the client computer system 
transmitting a request to the server computer system notwithstanding that the first and 
second proxies require different authentication data, the method comprising the following: 
an act of the client computer system dispatching a first request for a service 
through the first proxy; 

an act of the client computer system receiving a first authentication request 
from the first proxy; 

an act of the client computer system retrieving first authentication data 
associated with the first proxy; 

an act of the client computer system dispatching a second request for the 
service, the second request including the first authentication data; 

an act of the client computer system receiving a second authentication 
request from the second proxy, the first proxy using the first authentication data to 
authenticate the client computer system and forwarding the second request for the 
service to the second proxy, the second proxy then receiving the second request for 
the service; 

an act of the client computer system retrieving second authentication data 
associated with the second proxy; and 
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an act of the client computer system dispatching a third request for the 
service to the server computer system, the third request including the first 
authentication data and the second authentication data, the first proxy using the first 
authentication data to authenticate the client computer system and thereafter 
forwarding the third request for the service to the second proxy, the second proxy 
using the second authentication data to authenticate the client computer system and 
thereafter forwarding the third request to the server computer system or to a third 
proxy that requires third authentication data. 

2. A method in accordance with Claim 1, further comprising the following: 

an act of the first proxy removing the first authentication data from the third 
request; and 

an act of the first proxy forwarding the third request to the second proxy 
without the first authentication data. 

3. A method in accordance with Claim 1, wherein the act of the client 
computer system dispatching a third request for the service to the server computer system 
comprises the following: 

an act of the client computer system including the first and second 
authentication data in the third request using an HTTP authentication method. 

4. A method in accordance with Claim 3, wherein the act of the client 
computer system including the first and second authentication data in the third request 
using an HTTP authentication method comprises the following: 
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an act of identifying the first authentication data using a first realm 
associated with the first proxy; and 

an act of identifying the second authentication data using a second realm 
associated with the second proxy. 

5. A method in accordance with Claim 2, wherein the act of the client 
computer system including the first and second authentication data in the third request 
using an HTTP authentication method comprises the following: 

an act of the client computer system including the first and second 
authentication data in a WWW-Authenticate Response Header associated with the 
digest authentication method. 

6. A method in accordance with Claim 1, wherein the first and second proxies 
are administered by different entities. 

7. A method in accordance with Claim 6, wherein the client computer system 
comprises a wireless device, and the first proxy is administered by a wireless carrier. 

8. A method in accordance with Claim 7, wherein the second proxy is 
administered by a corporate entity. 

9. A method in accordance with Claim 1, wherein the first authentication data 
comprises a first user ID and a first password. 
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10. A method in accordance with Claim 1, wherein the second authentication 
data comprises a second user ID and a second password. 

11. A method in accordance with Claim 1, wherein the act of the client 
computer system dispatching a first request, the act of the client computer system receiving 
a first authentication request, the act of the client computer system dispatching a second 
request, the act of the client computer system receiving a second authentication request, 
and the act of the client computer system dispatching a third request are each performed in 
accordance with the HyperText Transport Protocol (HTTP). 

12. A method in accordance with Claim 1, wherein the act of the client 
computer system retrieving &st authentication data and the act of the client computer 
system dispatching a second request are each performed automatically, without user 
intervention, upon completion of the act of the client computer system receiving a first 
authentication request from the first proxy. 

13. A method in accordance with Claim 12, wherein the act of the client 
computer system retrieving second authentication data and the act of the client computer 
system dispatching a third request are each performed automatically, without user 
intervention, upon completion of the act of the client computer system receiving a second 
authentication request from the first proxy. 

14. A method in accordance with Claim 1, wherein the act of the client 
computer system retrieving second authentication data and the act of the client computer 
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system dispatching a third request are each performed automatically, without user 
intervention, upon completion of the act of the client computer system receiving a second 
authentication request from the first proxy. 
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15. In a network configuration that includes a client computer system, a server 
computer system and a plurality of proxy computer systems that the client computer 
system would need to communicate through in order to comimunicate with the server 
computer system, the plurality of proxy computer systems including at least a first proxy 
that requires authentication using first authentication data and a second proxy that requires 
authentication using second authentication data, a method of the client computer system 
transmitting a request to the server computer system notwithstanding that the first and 
second proxies require different authentication data, the method comprising the following: 
an act of the client computer system dispatching a first request for a service; 
a step for the client computer system authenticating to the first proxy using 
the first authentication data; and 

a step for the client computer system authenticating to the second proxy 
using the second authentication to thereby allow communication between the client 
computer system and the server computer system. 
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16. In a computer program product for use in a network configuration that 
includes a client computer system, a server computer system and a plurality of proxy 
computer systems that the client computer system would need to communicate through in 
order to communicate with the server computer system, the plurality of proxy computer 
systems including at least a first proxy that requires authentication using first 
authentication data and a second proxy that requires authentication using second 
authentication data, the computer program product for implementing a method of the client 
computer system transmitting a request to the server computer system notwithstanding that 
the first and second proxies require different authentication data, the computer program 
product comprising a computer-readable medium having computer-executable instructions 
for performing the following: 

an act of the client computer system causing a first request for a service to 
be dispatched through the first proxy; 

an act of the client computer system detecting the receipt of a first 
authentication request from the first proxy; 

an act of the client computer system causing first authentication data 
associated with the first proxy to be retrieved; 

an act of the client computer system causing a second request for the service 
to be dispatched, the second request including the first authentication data; 

an act of the client computer system detecting the receipt of a second 
authentication request from the second proxy, the first proxy using the first 
authentication data to authenticate the client computer system and forwarding the 
second request for the service to the second proxy, the second proxy then receiving 
the second request for the service; 
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an act of the client computer system causing second authentication data 
associated with the second proxy to be retrieved; and 

an act of the client computer system causing a third request for the service 
to be dispatched to the server computer system, the third request including the first 
authentication data and the second authentication data, the first proxy using the first 
authentication data to authenticate the client computer system and thereafter 
forwarding the third request for the service to the second proxy, the second proxy 
using the second authentication data to authenticate the client computer system and 
thereafter forwarding the third request to the server computer system or to a third 
proxy that requires third authentication data. 

17. A computer program product in accordance with Claim 16, wherein the 
computer-executable instructions for performing the act of the client computer system 
causing a third request for the service to be dispatched to the server computer system 
comprises computer-executable instructions for performing the following: 

an act of including the first and second authentication data in the third 
request using an HTTP authentication method. 

18. A computer program product in accordance with Claim 17, wherein the 
computer-executable instructions for performing the act of including the first and second 
authentication data in the third request using an HTTP authentication method comprises 
computer-executable instructions for implementing the following: 

an act of identifying the first authentication data using a first reahn 
associated with the first proxy; and 
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an act of identifying the second authentication data using a second realm 
associated with the second proxy. 

19. A computer program product in accordance with Claim 17, wherein the 
computer-executable instruction for performing the act of including the fu-st and second 
authentication data in the third request using an HTTP authentication method comprises 
computer-executable instructions for implementing the following: 

an act of including the first and second authentication data in a WWW- 
Authenticate Response Header associated with the digest authentication method. 

20. A computer program product in accordance with Claim 16, wherein the 
computer-executable instructions for implementing an act of the client computer system 
causing a first request to be dispatched, the act of the client computer system detecting the 
receipt of a first authentication request, the act of the client computer system causing a 
second request to be dispatched, the act of the client computer system detecting the receipt 
a second authentication request, and the act of the client computer system causing a third 
request to be dispatched are each performed in accordance with the HyperText Transport 
Protocol (HTTP). 

21. A computer-program product in accordance with Claim 16, wherein the 
computer-readable medium is a physical computer-readable medium. 
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22. In a network configuration that includes a client computer system, a server 
computer system and a plurality of proxy computer systems that the client computer 
system would need to communicate through in order to communicate with the server 
computer system, the plurality of proxy computer systems including at least a first proxy 
that requires authentication using first authentication data and a second proxy that requires 
authentication using second authentication data, a method of the client computer system 
connecting to the server computer system notwithstanding that the first and second proxies 
require different authentication data, the method comprising the following: 

an act of the client computer system dispatching a connect request to the 

first proxy; 

an act of the client computer system receiving a first authentication request 
fi'om the first proxy; 

an act of the client computer system retrieving first authentication data 
associated with the first proxy; 

an act of the client computer system dispatching a coimect request to the 
second proxy, the connect request to the second proxy including the first 
authentication data, wherein the first proxy uses the first authentication data to 
authenticate the client computer system, enters byte forwarding mode, and forwards 
the connect request to the second proxy server; 

an act of the client computer system receiving, via the first proxy, a second 
authentication request from the second proxy; 

an act of the client computer system retrieving second authentication data 
associated with the second proxy; and 
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an act of the client computer system dispatching a connect request to the 
server computer system or to a third proxy that requires third authentication data, 
the connect request to the server computer system or to the third proxy including 
the first authentication data and the second authentication data, wherein the second 
proxy uses the second authentication data to authenticate the client computer 
system, enters byte forwarding mode, and forwarding the connect request to the 
server computer system or to the third proxy. 

23. A method in accordance with Claim 22, wherein the act of the client 
computer system dispatching a connect request to the server computer system or to a third 
proxy comprises the following: 

an act of the client computer system including the first and second 
authentication data in the third request using an HTTP authentication method. 

24. A method in accordance with Claim 23, wherein the act of the client 
computer system including the first and second authentication data in the third request 
using an HTTP authentication method comprises the following: 

an act of identifying the first authentication data using a first realm 
associated with the first proxy; and 

an act of identifying the second authentication data using a second realm 
associated with the second proxy. 



- Page 36 - 



Docket No. 13768.189 



1 

2 
3 
4 
5 
6 
7 
8 
9 

10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 



25. A method in accordance with Claim 23, wherein the act of the client 
computer system including the first and second authentication data in the third request 
using an HTTP authentication method comprises the following: 

an act of the client computer system including the first and second 
authentication data in a WWW-Authenticate Response Header associated with the 
digest authentication method. 

26. A method in accordance with Claim 22, wherein the first and second 
proxies are administered by different entities. 

27. A method in accordance with Claim 26, wherein the client computer system 
comprises a wireless device, and the first proxy is administered by a wireless carrier. 

28. A method in accordance with Claim 27, wherein the second proxy is 
administered by a corporate entity. 

29. A method m accordance with Claim 22, wherein the first authentication 
data comprises a first user ID and a first password. 

30. A method in accordance with Claim 22, wherein the second authentication 
data comprises a second user ID and a second password. 



31. A method in accordance with Claim 22, wherein the act of the client 
computer system dispatching a connect request to the first proxy, the act of the client 
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computer system receiving a first authentication request from the first proxy, the act of the 
client computer system dispatching a connect request to the second proxy, the act of the 
client computer system receiving a second authentication request from the second proxy, 
and the act of the client computer system dispatching a connect request to the server 
computer system or to a third proxy are performed in accordance with the Secure Socket 
Layer (SSL) protocol. 

32. A method in accordance with Claim 22, wherein the act of the client 
computer system dispatching a connect request to the first proxy, the act of the client 
computer system receiving a first authentication request from the first proxy, the act of the 
client computer system dispatching a connect request to the second proxy, the act of the 
client computer system receiving a second authentication request from the second proxy, 
and the act of the client computer system dispatching a connect request to the server 
computer system or to a third proxy are performed in accordance with the HyperText 
Transport Protocol (HTTP). 

33. A method in accordance with Claun 32, wherein the act of the client 
computer system retrieving first authentication data and the act of the client computer 
system dispatching a connect request to the second proxy are performed automatically, 
without user intervention, upon completion of the act of the client computer system 
receiving a first authentication request from the first proxy. 

34. A method m accordance with Claim 33, wherein the act of the client 
computer system retrieving second authentication data and the act of the client computer 
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system dispatching a connect request to the server computer system or to a third proxy are 
performed automatically, without user intervention, upon completion of the act of the 
client computer system receiving a second authentication request from the second proxy. 

35. A method in accordance with Claim 22, wherein the act of the client 
computer system retrieving second authentication data and the act of the client computer 
system dispatching a connect request to the server computer system or to a third proxy are 
performed automatically, without user intervention, upon completion of the act of the 
client computer system receiving a second authentication request from the second proxy. 
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36. In a network configuration that includes a client computer system, a server 
computer system and a plurality of proxy computer systems that the client computer 
system would need to communicate through in order to communicate with the server 
computer system, the plurality of proxy computer systems including at least a first proxy 
that requires authentication using first authentication data and a second proxy that requires 
authentication using second authentication data, a method of the client computer system 
transmitting a request to the server computer system notwithstanding that the first and 
second proxies require different authentication data, the method comprising the following: 
an act of the client computer system dispatching a connect request to the 

first proxy; 

a step for the client computer system authenticating to the first proxy using 
the first authentication data; and 

a step for the client computer system authenticating to the second proxy 
using the second authentication to thereby allow communication between the client 
computer system and the server computer system. 
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37. A computer program product for use in a network configuration that 
includes a client computer system, a server computer system and a plurality of proxy 
computer systems that the client computer system would need to communicate through in 
order to communicate with the server computer system, the plurality of proxy computer 
systems including at least a first proxy that requires authentication using first 
authentication data and a second proxy that requires authentication using second 
authentication data, the computer program product for implementing a method of the client 
computer system connecting to the server computer system notwithstanding that the first 
and second proxies require different authentication data, the computer program product 
comprising computer-executable instructions for performing the following: 

an act of the client computer system causing a connect request to be 
dispatched to the first proxy; 

an act of the client computer system detecting the receipt of a first 
authentication request from the first proxy; 

an act of the client computer system causing the first authentication data 
associated with the first proxy to be retrieved; 

an act of the client computer system causing a cormect request to be 
dispatched to the second proxy, the connect request to the second proxy including 
the first authentication data, wherein the first proxy uses the first authentication 
data to authenticate the client computer system, enters byte forwarding mode, and 
forwards the connect request to the second proxy server; 

an act of the client computer system detecting the receipt of a second 
authentication request from the second proxy; 
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an act of the client computer system causing the second authentication data 
associated with the second proxy to be retrieved; and 

an act of the client computer system causing a cormect request to be 
dispatched to the server computer system or to a third proxy that requires third 
authentication data, the connect request to the server computer system or to the 
third proxy including the first authentication data and the second authentication 
data, wherein the second proxy uses the second authentication data to authenticate 
the client computer system, enters byte forwarding mode, and forwarding the 
connect request to the server computer system or to the third proxy. 

38. A computer program product in accordance with Claim 37, wherein the 
computer-executable instructions for performing the act of the client computer system 
causing a cormect request to be dispatched to the server computer system or to a third 
proxy comprises computer-executable instructions for performing the following: 

an act of including the first and second authentication data in the third 
request using an HTTP authentication method. 

39. A computer program product in accordance with Claim 38, wherein the 
computer-executable instructions for performing the act of including the first and second 
authentication data in the third request using an HTTP authentication method comprises 
computer-executable instructions for implementing the following: 

an act of identifying the first authentication data using a first realm 
associated with the first proxy; and 
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an act of identifying the second authentication data using a second realm 
associated with the second proxy. 

40. A computer program product in accordance with Claim 38, wherein the 
computer-executable instructions for performing the act of including the first and second 
authentication data in the third request using an HTTP authentication method comprises 
computer-executable instructions for implementing the following: 

an act of including the first and second authentication data in a WWW- 
Authenticate Response Header associated with the digest authentication method. 

41. A computer program product in accordance with Claim 37, wherein the 
computer-executable instructions for implementing an act of the client computer system 
causing a connect request to be dispatched to the fu-st proxy, the act of the client computer 
system detecting the receipt of a first authentication request, the act of the client computer 
system causing a connect request to be dispatched to the second proxy, the act of the client 
computer system detecting the receipt a second authentication request, and the act of the 
client computer system causing a connect request to be dispatched are each performed in 
accordance with the HyperText Transport Protocol (HTTP). 

42. A computer program product in accordance with Claim 37, wherein the 
computer-executable instructions for implementing an act of the client computer system 
causing a connect request to be dispatched to the first proxy, the act of the client computer 
system detecting the receipt of a first authentication request, the act of the client computer 
system causing a connect request to be dispatched to the second proxy, the act of the client 
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computer system detecting the receipt a second authentication request, and the act of the 
client computer system causing a connect request to be dispatched are each performed in 
accordance with the Secure Socket Layer (SSL) protocol. 

43. A computer-program product in accordance with Claim 37, wherein the 
computer-readable medium is a physical computer-readable medium. 
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44. A computer-readable medium for use in a network configuration that 
includes a client computer system, a server computer system and a plurality of proxy 
computer systems that the client computer system would need to communicate through in 
order to communicate with the server computer system, the plurality of proxy computer 
systems including at least a first proxy that requires authentication using first 
authentication data and a second proxy that requires authentication using second 
authentication data, the computer-readable medium having stored thereon a data structure, 
the data structure comprising the following: 

a first field representing authentication data, the first field comprising the 

following: 

a second field representing an authentication header that identifies 
the first field as containing the authentication data; 

a third field representing authentication data for the first proxy; and 

a fourth field representing authentication data for the second proxy, 
wherein the third field comprises the following: 

a fifth field representing an identifier that identifies the third field as 
containing authentication data for the first proxy; and 

a sixth field representing the first authentication data; 
wherein the fourth field comprises the following: 

a seventh field representing an identifier that identifies the fourth 
field as containing authentication data for the second proxy; and 

an eighth field representing the second authentication data. 
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45. A data structure in accordance with Claim 44, wherein the fifth field and the 
seventh field each identify a realm in accordance with the digest authentication method. 

46. A data structure in accordance with Claim 44, wherein the first and second 
authentication data in the sixth field and the eighth field, respectively, are at least partially 
encrypted. 

47. A data structure in accordance with Claim 44, wherein the fifth field 
comprises the following: 

a ninth field representing a first user ID recognizable by the first proxy as 
identifying a user associated with the client computer system; and 

a tenth field representing a first password recognizable by the first proxy as 
identifying a password associated with the user; 
wherein the seventh field comprises the following: 

an eleventh field representing a second user ID recognizable by the second 
proxy as identifying the user associated with the client computer system; and 

a twelfth field representing a second password recognizable by the second 
proxy as identifying a password associated with the user. 

48. A data structure in accordance with Claim 47, wherein the tenth field and 
the twelfth field respectively represent the first and second passwords in encrypted form. 
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